How to automatically update all application in intune

Question

Hi Team,

Under Security > Endpoint > Vulnerability Management > Recommendations, we have a lot of recommendations that ask to update applications. We want to know if there is a way to apply the software updates automatically on user devices instead of doing it one by one.

Thank you for your help

Answer 1

@J-3804, Thanks for posting in Q&A. In Intune, there are some app types can automatically update. For example, store app, you can check if the app is existing in these app type.

https://learn.microsoft.com/en-us/mem/intune/apps/apps-add#app-types-in-microsoft-intune

If it is not existing, you can check if the app has silently installed command which can install without user interaction. If yes, you can deploy the update via Intune win 32 app.

https://learn.microsoft.com/en-us/mem/intune/apps/apps-win32-add

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Sadly, no. It is one area where other MDM solutions do much better. As the accepted answer says, it is possible with Store apps, but not all Store apps are available to deploy through Intune (e.g. WhatsApp, Microsoft language packs, etc.), and lots of apps aren't in the Store in the first place.

Defender doesn't even give you the option to address configuration changes from the Defender console, even though there's a local client (Defender) on every user's laptop that could make changes (even if it isn't the main AV).

If your company is well resourced, you could look at Bacon or Jamf (more Mac focused, and has some of its own quirks), but these both have a catalog of Win32 apps that can auto update.